Re: Packet filter can't NAT devices 2 hops away?

Ah, the picture I drew did not make it clear. The bridges connect
different interfaces. For example, R3 is connected to veb35 on an
interface with IP 10.3.5.1, but R3 is connected to veb34 on a
separate interface with IP 10.3.4.1.

The chart didn't make it clear enough, but no three
nodes are in the same broadcast domain, so it's not possible
to directly send a message from R5 to R1.

--
jrmu
IRCNow (https://ircnow.org)

On Wed, Jul 03, 2024 at 09:39:06PM +0100, Zé Loff wrote:
> On Wed, Jul 03, 2024 at 12:43:53PM -0700, jrmu wrote:
> > Greetings,
> >
> > I'm trying to get packet filter to provide NAT for a group of routers I
> > set up as follows:
> >
> > R1 <--> Internet
> > 10.1/16
> > ^
> > |
> > veb12
> > |
> > R2 <--veb23--> R3 <--veb35--> R5 10.5/16
> > 10.2/16 10.3/16
> > ^ ^
> > \ /
> > veb24 /
> > \ veb34
> > \ /
> > > R4 <
> > 10.4/16
>
> I know this is unrelated to your question, and apologies in advance if
> this is a stupid question, but... what is the point of having routers
> and subnets if you are veb-ing everything together?
>
> --
>  
>